$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa File: 9b970d4e-cc06-30a7-a188-46e717b7337e.roa (raw, json) Hash identifier: 8MCDSs/Qs3Faxo0w4g6FQFZJAtT1J6BfAMaV1sbLttA= Subject key identifier: FA:FE:E2:6D:C8:77:5C:AD:C0:DF:24:8E:52:A5:0B:2C:2C:CC:12:56 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD3A0ED4BA505AF181A392E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8d:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:ed:4b:a5:05:af:18:1a:39:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=a1acd416-c8e2-4f4e-a990-c2f5532c9ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:39:b2:19:17:a6:87:33:69:66:80:2c:17: 31:d4:74:76:b6:38:0d:5f:93:45:6f:39:ab:68:f6: 63:3d:d7:0b:a9:16:b6:e8:6f:39:a7:9e:f5:65:ac: 8e:05:a7:59:cd:06:20:e4:fe:68:bc:75:a3:19:a3: 50:a9:44:0b:32:45:8d:eb:f3:a1:9a:e7:43:fc:d8: 19:33:e8:aa:48:35:0b:c1:05:9c:79:95:2c:34:7c: 66:04:33:7d:dd:92:2a:10:b1:18:4e:50:e9:8f:cf: 44:24:d0:d7:07:50:72:43:48:a1:03:15:b8:11:e6: 0d:5a:3e:62:59:82:d2:2d:39:ed:17:54:86:a2:09: e8:6f:72:23:c1:df:a4:d6:45:c4:e5:47:b3:a8:f7: 4d:89:fb:c6:eb:cf:26:21:36:2d:bc:69:1d:06:8c: ac:19:c9:e0:20:57:f0:ae:e1:86:9a:18:db:41:e0: 92:5b:bf:f8:96:30:ae:01:a2:58:2f:7c:ca:c6:77: da:0f:9d:cc:29:c7:fc:63:46:d2:de:ec:ba:92:08: ef:3f:c5:63:3c:0a:90:a7:ba:8d:f0:f2:9d:78:fe: c5:b3:09:b5:aa:54:81:e3:03:ed:f0:15:ed:3b:49: b2:88:4d:17:f2:eb:b6:b9:15:8d:d9:b1:10:49:86: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FE:E2:6D:C8:77:5C:AD:C0:DF:24:8E:52:A5:0B:2C:2C:CC:12:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:3400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:dd:33:d9:96:73:21:2d:64:e8:21:ba:ee:dc:ed:f2:e3:ae: 0b:4a:ae:50:6f:ba:1d:8f:dd:a7:14:05:b6:f4:3f:af:b2:b1: 4e:ea:df:e1:04:f6:99:56:44:fd:53:c0:b4:0f:79:6f:87:00: 6c:b7:00:76:e6:3a:d1:af:80:65:b9:ae:b0:aa:72:dc:a7:68: 03:e1:68:03:fe:ad:57:22:e8:ce:9b:b5:23:7a:27:18:f2:3d: 7d:6b:83:31:fe:3f:e6:84:18:3c:35:31:06:a7:af:69:83:2d: 1e:dc:c1:6d:55:70:cc:9a:37:18:0c:b7:f0:ea:43:c3:6e:54: 23:85:9f:9f:df:02:71:a5:21:10:6f:01:ce:d6:f1:47:53:cf: 61:d6:12:2a:d0:9e:52:c4:68:5f:ef:85:26:8f:9a:c9:5f:e4: 70:56:42:b7:4f:30:e5:90:bf:93:7f:e8:4e:b7:af:25:3a:ce: eb:6b:08:99:ce:a3:8e:84:ec:30:75:3f:3b:1b:75:d2:be:89: a0:31:47:d3:79:d7:c5:18:59:a4:3a:06:18:25:0e:59:46:be: ce:f6:a9:4c:52:19:72:70:e8:fa:7e:81:bc:78:9c:fa:b4:e8: 14:1e:83:6e:98:76:de:86:b6:b5:83:96:b6:f7:e5:e8:af:b8: e7:0e:29:2c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErToO1LpQWvGBo5LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YTFhY2Q0MTYtYzhlMi00ZjRlLWE5OTAtYzJmNTUzMmM5ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj85shkXpoczaWaALBcx1HR2tjgNX5NFbzmr aPZjPdcLqRa26G85p571ZayOBadZzQYg5P5ovHWjGaNQqUQLMkWN6/OhmudD/NgZ M+iqSDULwQWceZUsNHxmBDN93ZIqELEYTlDpj89EJNDXB1ByQ0ihAxW4EeYNWj5i WYLSLTntF1SGognob3Ijwd+k1kXE5UezqPdNifvG688mITYtvGkdBoysGcngIFfw ruGGmhjbQeCSW7/4ljCuAaJYL3zKxnfaD53MKcf8Y0bS3uy6kgjvP8VjPAqQp7qN 8PKdeP7Fswm1qlSB4wPt8BXtO0myiE0X8uu2uRWN2bEQSYatNwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPr+4m3Id1ytwN8kjlKlCywszBJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWI5NzBkNGUtY2MwNi0z MGE3LWExODgtNDZlNzE3YjczMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujTQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbd0z2ZZzIS1k6CG67tzt8uOuC0quUG+6HY/dpxQFtvQ/r7KxTurf 4QT2mVZE/VPAtA95b4cAbLcAduY60a+AZbmusKpy3KdoA+FoA/6tVyLozpu1I3on GPI9fWuDMf4/5oQYPDUxBqevaYMtHtzBbVVwzJo3GAy38OpDw25UI4Wfn98CcaUh EG8BztbxR1PPYdYSKtCeUsRoX++FJo+ayV/kcFZCt08w5ZC/k3/oTrevJTrO62sI mc6jjoTsMHU/Oxt10r6JoDFH03nXxRhZpDoGGCUOWUa+zvapTFIZcnDo+n6BvHic +rToFB6Dbph23oa2tYOWtvfl6K+45w4pLA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:25 2025 by rpki-client